View Single Post
hmmmmm
Great Tester of Whatever
Join Date: Mar 2017
Location: ...
Old 07-26-2018 , 06:23   Re: Signature Request Thread
Reply With Quote #319

CPureFileTracker:oesFileMatch(char const*,char const*,int,FileHash_t *,USERID_s)
Library: Engine
Windows: \x55\x8B\xEC\x8B\x0D\x2A\x2A\x2A\x2A\x81\xEC\ x94\x05\x00\x00
Linux: \x55\x89\xE5\x57\x56\x53\x81\xEC\xFC\x05\x00\ x00

It isn't a virtual function so you'll need a detour library to hook it.
Also IDA marks it as a __userpurge on Windows so there may be some funky calling convention being used.
hmmmmm is offline